Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6JI0wYCkzDSzuzF1cyszA8ES_DM.mft
File:                     6JI0wYCkzDSzuzF1cyszA8ES_DM.mft (raw, json)
Hash identifier:          E/z3EMqlKIBOLAa/nVIQ4F5SaLYoTtwgSiWfd0dHORE=
Subject key identifier:   5A:F0:E9:A5:EC:AC:C3:29:BC:0E:10:F4:7D:86:9B:F2:12:14:CD:3D
Authority key identifier: E8:92:34:C1:80:A4:CC:34:B3:BB:31:75:73:2B:33:03:C1:12:FC:33
Certificate issuer:       /CN=e89234c180a4cc34b3bb3175732b3303c112fc33
Certificate serial:       019F8EA29B0C73C9493583967E0018B2DAFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6JI0wYCkzDSzuzF1cyszA8ES_DM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6JI0wYCkzDSzuzF1cyszA8ES_DM.mft
Manifest number:          3E
Signing time:             Thu 23 Jul 2026 11:00:48 +0000
Manifest this update:     Thu 23 Jul 2026 11:00:48 +0000
Manifest next update:     Fri 24 Jul 2026 11:00:48 +0000
Files and hashes:         1: 6JI0wYCkzDSzuzF1cyszA8ES_DM.crl (hash: 0gxliMlFnV8YlNIXYGh+cf5iP2iUvx9Gu57n549NnAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6JI0wYCkzDSzuzF1cyszA8ES_DM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6JI0wYCkzDSzuzF1cyszA8ES_DM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6JI0wYCkzDSzuzF1cyszA8ES_DM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:9b:0c:73:c9:49:35:83:96:7e:00:18:b2:da:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e89234c180a4cc34b3bb3175732b3303c112fc33
        Validity
            Not Before: Jul 23 11:00:48 2026 GMT
            Not After : Jul 24 11:00:48 2026 GMT
        Subject: CN=5af0e9a5ecacc329bc0e10f47d869bf21214cd3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b9:eb:4f:7c:7d:d0:a7:b6:19:4a:3e:12:7c:
                    cb:c4:1f:4b:2b:d1:24:3b:ec:9f:2c:b4:c6:5a:2d:
                    4e:3e:ea:eb:48:77:a0:d7:23:e1:bc:16:98:41:77:
                    b1:6e:39:fa:f1:36:9d:8b:fd:67:c6:30:e3:79:9c:
                    38:70:e7:84:3c:26:dd:ab:7c:d3:31:86:ee:9f:fd:
                    6f:83:b7:1c:8f:d0:89:d0:18:5d:20:13:0f:75:ac:
                    b7:fd:38:c3:72:4a:09:1c:51:2b:c5:b2:4e:16:aa:
                    43:79:67:5c:ff:0c:66:88:93:c9:dc:49:fe:01:a2:
                    d3:90:c3:34:56:1a:b0:4a:dd:a5:aa:a6:5f:d4:6c:
                    5e:f4:9d:d2:c7:1e:c3:f9:8d:87:0e:ad:21:2e:7b:
                    20:2d:27:d9:df:7e:e0:b6:4a:61:6d:33:b2:ae:ad:
                    eb:e9:43:53:3b:23:ea:06:1b:5c:69:38:1a:00:99:
                    60:93:68:c6:4a:cf:20:bb:85:1e:da:4e:c0:f1:ab:
                    1d:f6:61:8d:d5:3d:97:40:7f:72:56:76:95:f3:a3:
                    5e:8b:a1:26:89:fb:0a:a5:01:3a:99:dc:f5:71:43:
                    01:41:20:1f:43:06:ef:ac:04:31:98:07:f4:8d:ca:
                    0b:77:48:61:14:bc:cc:56:e6:9c:bf:86:79:ec:8b:
                    14:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F0:E9:A5:EC:AC:C3:29:BC:0E:10:F4:7D:86:9B:F2:12:14:CD:3D
            X509v3 Authority Key Identifier:
                keyid:E8:92:34:C1:80:A4:CC:34:B3:BB:31:75:73:2B:33:03:C1:12:FC:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JI0wYCkzDSzuzF1cyszA8ES_DM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6JI0wYCkzDSzuzF1cyszA8ES_DM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6JI0wYCkzDSzuzF1cyszA8ES_DM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:dd:e5:64:27:c2:9d:4d:57:f6:9d:d5:9c:40:24:b6:83:03:
         52:0c:a4:ad:a6:b5:6d:57:93:74:86:3f:c1:26:1e:94:2e:d1:
         52:30:bf:c0:2b:14:2c:ea:7a:f5:af:ce:c4:bc:28:3e:26:77:
         ac:70:4a:40:c4:4b:1b:ce:f6:c7:b0:dd:55:7e:a8:c7:4b:9f:
         6e:9b:4d:0f:be:4e:e1:13:9d:46:94:3a:20:40:b1:62:b8:c3:
         67:4a:7e:37:3d:26:6c:ab:3f:e0:f2:c3:cc:f4:a8:93:43:bc:
         be:cc:a3:bd:da:59:1e:1e:d4:82:da:27:00:d0:14:e8:fc:7f:
         9b:a6:62:38:9c:5b:81:fd:ca:35:ca:b6:e9:b4:01:17:58:ed:
         8d:91:71:48:f9:e0:1a:86:17:ae:79:5a:ba:5e:4b:43:2d:a0:
         74:4b:eb:22:be:a3:e5:69:04:01:20:44:64:6b:b2:07:4b:ee:
         e2:d4:0f:cb:32:04:c7:d5:d5:b5:54:fe:d1:6c:9f:e6:76:f2:
         5b:f5:98:aa:0c:71:1f:b3:82:bb:84:33:47:d3:2f:b5:57:e5:
         c9:3d:93:20:e4:1c:c8:23:0c:b0:8f:7d:72:13:4a:67:d2:83:
         f2:2f:f5:07:21:16:c6:01:b7:95:6b:a1:f8:a4:12:d9:d9:8d:
         ad:d0:c2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:53 2026 by rpki-client